From xracoonx at gmx.de Wed Jul 6 09:04:44 2016 From: xracoonx at gmx.de (Daniel) Date: Wed, 6 Jul 2016 09:04:44 +0200 Subject: [Releasing] Apparent virus in qt downloads? Message-ID: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Hi, I just tried to download x86 windows 7 qt via the unified installer but it did not succeed because of a virus warning (screenshot attached). Daniel -------------- next part -------------- A non-text attachment was scrubbed... Name: Qt-virus.png Type: image/png Size: 8218 bytes Desc: not available URL: From thiago.macieira at intel.com Wed Jul 6 09:10:45 2016 From: thiago.macieira at intel.com (Thiago Macieira) Date: Wed, 06 Jul 2016 00:10:45 -0700 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: <5466416.jrHqdif4Ve@tjmaciei-mobl1> On quarta-feira, 6 de julho de 2016 09:04:44 PDT Daniel wrote: > Hi, > > I just tried to download x86 windows 7 qt via the unified installer but > it did not succeed because of a virus warning (screenshot attached). We're aware that some virus scanner tools are reporting a virus. We haven't yet been able to prove decidedly whether it's a virus or a false positive. -- Thiago Macieira - thiago.macieira (AT) intel.com Software Architect - Intel Open Source Technology Center From xracoonx at gmx.de Wed Jul 6 09:12:56 2016 From: xracoonx at gmx.de (Daniel) Date: Wed, 6 Jul 2016 09:12:56 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <5466416.jrHqdif4Ve@tjmaciei-mobl1> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> <5466416.jrHqdif4Ve@tjmaciei-mobl1> Message-ID: <46953edb-5cd2-b836-d6ef-209ce0c69f37@gmx.de> On 06.07.2016 09:10, Thiago Macieira wrote: > On quarta-feira, 6 de julho de 2016 09:04:44 PDT Daniel wrote: >> Hi, >> >> I just tried to download x86 windows 7 qt via the unified installer but >> it did not succeed because of a virus warning (screenshot attached). > > We're aware that some virus scanner tools are reporting a virus. > > We haven't yet been able to prove decidedly whether it's a virus or a false > positive. Okay, good to hear that you are aware. From Kai.Koehne at qt.io Wed Jul 6 09:19:15 2016 From: Kai.Koehne at qt.io (Kai Koehne) Date: Wed, 6 Jul 2016 07:19:15 +0000 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: Hi, Would be still interesting to know which file it is complaining about ... Any chance you can get the full path + maybe the m5sum of the file in question? Thanks Kai > -----Original Message----- > From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- > project.org] On Behalf Of Daniel > Sent: Wednesday, July 06, 2016 9:05 AM > To: releasing at qt-project.org > Subject: [Releasing] Apparent virus in qt downloads? > > Hi, > > I just tried to download x86 windows 7 qt via the unified installer but it did > not succeed because of a virus warning (screenshot attached). > > Daniel From xracoonx at gmx.de Wed Jul 6 09:26:57 2016 From: xracoonx at gmx.de (Daniel) Date: Wed, 6 Jul 2016 09:26:57 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: Hi, Unfortunately, avast seems not provide those details in the logs. It only mentions the qt online installer. I could try the download again. Can I extract the information from the qt online installer somehow? Daniel On 06.07.2016 09:19, Kai Koehne wrote: > Hi, > > Would be still interesting to know which file it is complaining about ... Any chance you can get the full path + maybe the m5sum of the file in question? > > Thanks > > Kai > >> -----Original Message----- >> From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- >> project.org] On Behalf Of Daniel >> Sent: Wednesday, July 06, 2016 9:05 AM >> To: releasing at qt-project.org >> Subject: [Releasing] Apparent virus in qt downloads? >> >> Hi, >> >> I just tried to download x86 windows 7 qt via the unified installer but it did >> not succeed because of a virus warning (screenshot attached). >> >> Daniel From Kai.Koehne at qt.io Wed Jul 6 09:33:50 2016 From: Kai.Koehne at qt.io (Kai Koehne) Date: Wed, 6 Jul 2016 07:33:50 +0000 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: It doesn't seem to complain about the installer executable itself, but about an archive that's fetched online. Does it tell you more if you select 'Smart Scan ausführen'? Regards Kai > -----Original Message----- > From: Daniel [mailto:xracoonx at gmx.de] > Sent: Wednesday, July 06, 2016 9:27 AM > To: Kai Koehne ; releasing at qt-project.org > Subject: Re: [Releasing] Apparent virus in qt downloads? > > Hi, > > Unfortunately, avast seems not provide those details in the logs. It only > mentions the qt online installer. I could try the download again. > Can I extract the information from the qt online installer somehow? > > Daniel > > On 06.07.2016 09:19, Kai Koehne wrote: > > Hi, > > > > Would be still interesting to know which file it is complaining about ... Any > chance you can get the full path + maybe the m5sum of the file in question? > > > > Thanks > > > > Kai > > > >> -----Original Message----- > >> From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- > >> project.org] On Behalf Of Daniel > >> Sent: Wednesday, July 06, 2016 9:05 AM > >> To: releasing at qt-project.org > >> Subject: [Releasing] Apparent virus in qt downloads? > >> > >> Hi, > >> > >> I just tried to download x86 windows 7 qt via the unified installer > >> but it did not succeed because of a virus warning (screenshot attached). > >> > >> Daniel From xracoonx at gmx.de Wed Jul 6 09:43:21 2016 From: xracoonx at gmx.de (Daniel) Date: Wed, 6 Jul 2016 09:43:21 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: Have to restart download again. Might take a bit... Daniel On 06.07.2016 09:33, Kai Koehne wrote: > It doesn't seem to complain about the installer executable itself, but about an archive that's fetched online. > > Does it tell you more if you select 'Smart Scan ausführen'? > > Regards > > Kai > >> -----Original Message----- >> From: Daniel [mailto:xracoonx at gmx.de] >> Sent: Wednesday, July 06, 2016 9:27 AM >> To: Kai Koehne ; releasing at qt-project.org >> Subject: Re: [Releasing] Apparent virus in qt downloads? >> >> Hi, >> >> Unfortunately, avast seems not provide those details in the logs. It only >> mentions the qt online installer. I could try the download again. >> Can I extract the information from the qt online installer somehow? >> >> Daniel >> >> On 06.07.2016 09:19, Kai Koehne wrote: >>> Hi, >>> >>> Would be still interesting to know which file it is complaining about ... Any >> chance you can get the full path + maybe the m5sum of the file in question? >>> >>> Thanks >>> >>> Kai >>> >>>> -----Original Message----- >>>> From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- >>>> project.org] On Behalf Of Daniel >>>> Sent: Wednesday, July 06, 2016 9:05 AM >>>> To: releasing at qt-project.org >>>> Subject: [Releasing] Apparent virus in qt downloads? >>>> >>>> Hi, >>>> >>>> I just tried to download x86 windows 7 qt via the unified installer >>>> but it did not succeed because of a virus warning (screenshot attached). >>>> >>>> Daniel > From xracoonx at gmx.de Wed Jul 6 10:14:41 2016 From: xracoonx at gmx.de (Daniel) Date: Wed, 6 Jul 2016 10:14:41 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: <7f94c06e-7137-c002-d582-20f6b383f83f@gmx.de> Strange. Now I get another error (attached, not a virus) and cannot proceed. Maybe I did not remember correctly which download options I choose... tried a number of downloads this morning... Trying the full 5.7.0 download next... Daniel On 06.07.2016 09:43, Daniel wrote: > Have to restart download again. Might take a bit... > > Daniel > > On 06.07.2016 09:33, Kai Koehne wrote: >> It doesn't seem to complain about the installer executable itself, but >> about an archive that's fetched online. >> >> Does it tell you more if you select 'Smart Scan ausführen'? >> >> Regards >> >> Kai >> >>> -----Original Message----- >>> From: Daniel [mailto:xracoonx at gmx.de] >>> Sent: Wednesday, July 06, 2016 9:27 AM >>> To: Kai Koehne ; releasing at qt-project.org >>> Subject: Re: [Releasing] Apparent virus in qt downloads? >>> >>> Hi, >>> >>> Unfortunately, avast seems not provide those details in the logs. It >>> only >>> mentions the qt online installer. I could try the download again. >>> Can I extract the information from the qt online installer somehow? >>> >>> Daniel >>> >>> On 06.07.2016 09:19, Kai Koehne wrote: >>>> Hi, >>>> >>>> Would be still interesting to know which file it is complaining >>>> about ... Any >>> chance you can get the full path + maybe the m5sum of the file in >>> question? >>>> >>>> Thanks >>>> >>>> Kai >>>> >>>>> -----Original Message----- >>>>> From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- >>>>> project.org] On Behalf Of Daniel >>>>> Sent: Wednesday, July 06, 2016 9:05 AM >>>>> To: releasing at qt-project.org >>>>> Subject: [Releasing] Apparent virus in qt downloads? >>>>> >>>>> Hi, >>>>> >>>>> I just tried to download x86 windows 7 qt via the unified installer >>>>> but it did not succeed because of a virus warning (screenshot >>>>> attached). >>>>> >>>>> Daniel >> > > _______________________________________________ > Releasing mailing list > Releasing at qt-project.org > http://lists.qt-project.org/mailman/listinfo/releasing -------------- next part -------------- A non-text attachment was scrubbed... Name: Qt-error.png Type: image/png Size: 19457 bytes Desc: not available URL: From xracoonx at gmx.de Wed Jul 6 10:16:40 2016 From: xracoonx at gmx.de (Daniel) Date: Wed, 6 Jul 2016 10:16:40 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <7f94c06e-7137-c002-d582-20f6b383f83f@gmx.de> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> <7f94c06e-7137-c002-d582-20f6b383f83f@gmx.de> Message-ID: Ah, no. It must be the online installer due to the process shown in the avast message. Sorry, then I can't do more... Daniel On 06.07.2016 10:14, Daniel wrote: > Strange. Now I get another error (attached, not a virus) and cannot > proceed. > > Maybe I did not remember correctly which download options I choose... > tried a number of downloads this morning... > > Trying the full 5.7.0 download next... > > Daniel > > > On 06.07.2016 09:43, Daniel wrote: >> Have to restart download again. Might take a bit... >> >> Daniel >> >> On 06.07.2016 09:33, Kai Koehne wrote: >>> It doesn't seem to complain about the installer executable itself, but >>> about an archive that's fetched online. >>> >>> Does it tell you more if you select 'Smart Scan ausführen'? >>> >>> Regards >>> >>> Kai >>> >>>> -----Original Message----- >>>> From: Daniel [mailto:xracoonx at gmx.de] >>>> Sent: Wednesday, July 06, 2016 9:27 AM >>>> To: Kai Koehne ; releasing at qt-project.org >>>> Subject: Re: [Releasing] Apparent virus in qt downloads? >>>> >>>> Hi, >>>> >>>> Unfortunately, avast seems not provide those details in the logs. It >>>> only >>>> mentions the qt online installer. I could try the download again. >>>> Can I extract the information from the qt online installer somehow? >>>> >>>> Daniel >>>> >>>> On 06.07.2016 09:19, Kai Koehne wrote: >>>>> Hi, >>>>> >>>>> Would be still interesting to know which file it is complaining >>>>> about ... Any >>>> chance you can get the full path + maybe the m5sum of the file in >>>> question? >>>>> >>>>> Thanks >>>>> >>>>> Kai >>>>> >>>>>> -----Original Message----- >>>>>> From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- >>>>>> project.org] On Behalf Of Daniel >>>>>> Sent: Wednesday, July 06, 2016 9:05 AM >>>>>> To: releasing at qt-project.org >>>>>> Subject: [Releasing] Apparent virus in qt downloads? >>>>>> >>>>>> Hi, >>>>>> >>>>>> I just tried to download x86 windows 7 qt via the unified installer >>>>>> but it did not succeed because of a virus warning (screenshot >>>>>> attached). >>>>>> >>>>>> Daniel >>> >> >> _______________________________________________ >> Releasing mailing list >> Releasing at qt-project.org >> http://lists.qt-project.org/mailman/listinfo/releasing > > > > _______________________________________________ > Releasing mailing list > Releasing at qt-project.org > http://lists.qt-project.org/mailman/listinfo/releasing > From edward.welbourne at qt.io Wed Jul 6 10:25:41 2016 From: edward.welbourne at qt.io (Edward Welbourne) Date: Wed, 6 Jul 2016 08:25:41 +0000 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <5466416.jrHqdif4Ve@tjmaciei-mobl1> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de>, <5466416.jrHqdif4Ve@tjmaciei-mobl1> Message-ID: Thiago Macieira: > We're aware that some virus scanner tools are reporting a virus. > > We haven't yet been able to prove decidedly whether it's a virus or a > false positive. Have we contacted the virus-scanner vendor(s) involved to ask them for details of what they think is a virus ? They might be able to work that out faster than we can ! Furthermore, if it's a false positive, it'll get them up to speed on the details faster that way ... Eddy. From thiago.macieira at intel.com Wed Jul 6 18:25:52 2016 From: thiago.macieira at intel.com (Thiago Macieira) Date: Wed, 06 Jul 2016 09:25:52 -0700 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> <5466416.jrHqdif4Ve@tjmaciei-mobl1> Message-ID: <1760615.IPXzluyjRW@tjmaciei-mobl1> On quarta-feira, 6 de julho de 2016 08:25:41 PDT Edward Welbourne wrote: > Thiago Macieira: > > We're aware that some virus scanner tools are reporting a virus. > > > > We haven't yet been able to prove decidedly whether it's a virus or a > > false positive. > > Have we contacted the virus-scanner vendor(s) involved to ask them for > details of what they think is a virus ? They might be able to work that > out faster than we can ! Furthermore, if it's a false positive, it'll > get them up to speed on the details faster that way ... Not yet, as far as I know. We were discussing this on the security mailing list, but no one responded to my last question from Thursday, asking how to prove that it's a false positive. -- Thiago Macieira - thiago.macieira (AT) intel.com Software Architect - Intel Open Source Technology Center From jhihn at gmx.com Wed Jul 6 20:03:12 2016 From: jhihn at gmx.com (Jason H) Date: Wed, 6 Jul 2016 20:03:12 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <1760615.IPXzluyjRW@tjmaciei-mobl1> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> <5466416.jrHqdif4Ve@tjmaciei-mobl1> , <1760615.IPXzluyjRW@tjmaciei-mobl1> Message-ID: > Sent: Wednesday, July 06, 2016 at 12:25 PM > From: "Thiago Macieira" > To: releasing at qt-project.org > Subject: Re: [Releasing] Apparent virus in qt downloads? > > On quarta-feira, 6 de julho de 2016 08:25:41 PDT Edward Welbourne wrote: > > Thiago Macieira: > > > We're aware that some virus scanner tools are reporting a virus. > > > > > > We haven't yet been able to prove decidedly whether it's a virus or a > > > false positive. > > > > Have we contacted the virus-scanner vendor(s) involved to ask them for > > details of what they think is a virus ? They might be able to work that > > out faster than we can ! Furthermore, if it's a false positive, it'll > > get them up to speed on the details faster that way ... > > Not yet, as far as I know. We were discussing this on the security mailing > list, but no one responded to my last question from Thursday, asking how to > prove that it's a false positive. Run it through other AV? Compare it to a another binary generated on the same build platform (and options) (and has been virus scanned)? I can see how an online installer might look like a virus, since they are all some form of an online installer... From thiago.macieira at intel.com Wed Jul 6 20:08:12 2016 From: thiago.macieira at intel.com (Thiago Macieira) Date: Wed, 06 Jul 2016 11:08:12 -0700 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: <1760615.IPXzluyjRW@tjmaciei-mobl1> References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> <1760615.IPXzluyjRW@tjmaciei-mobl1> Message-ID: <2547775.MoD8zADEYP@tjmaciei-mobl1> On quarta-feira, 6 de julho de 2016 09:25:52 PDT Thiago Macieira wrote: > On quarta-feira, 6 de julho de 2016 08:25:41 PDT Edward Welbourne wrote: > > Thiago Macieira: > > > We're aware that some virus scanner tools are reporting a virus. > > > > > > We haven't yet been able to prove decidedly whether it's a virus or a > > > false positive. > > > > Have we contacted the virus-scanner vendor(s) involved to ask them for > > details of what they think is a virus ? They might be able to work that > > out faster than we can ! Furthermore, if it's a false positive, it'll > > get them up to speed on the details faster that way ... > > Not yet, as far as I know. We were discussing this on the security mailing > list, but no one responded to my last question from Thursday, asking how to > prove that it's a false positive. Actually, the original reporter of https://bugreports.qt.io/browse/QTBUG-54480 has confirmed it's a false positive. You'll need to upgrade your virus definition files. -- Thiago Macieira - thiago.macieira (AT) intel.com Software Architect - Intel Open Source Technology Center From thiago.macieira at intel.com Wed Jul 6 23:18:03 2016 From: thiago.macieira at intel.com (Thiago Macieira) Date: Wed, 06 Jul 2016 14:18:03 -0700 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> <1760615.IPXzluyjRW@tjmaciei-mobl1> Message-ID: <6968586.uV7J039PAb@tjmaciei-mobl1> On quarta-feira, 6 de julho de 2016 20:03:12 PDT Jason H wrote: > > Not yet, as far as I know. We were discussing this on the security mailing > > list, but no one responded to my last question from Thursday, asking how > > to > > prove that it's a false positive. > > Run it through other AV? We have. Two AVs report it, 20 others don't. > Compare it to a another binary generated on the same build platform (and > options) (and has been virus scanned)? Waiting for that to happen. -- Thiago Macieira - thiago.macieira (AT) intel.com Software Architect - Intel Open Source Technology Center From xracoonx at gmx.de Thu Jul 7 10:06:18 2016 From: xracoonx at gmx.de (Daniel) Date: Thu, 7 Jul 2016 10:06:18 +0200 Subject: [Releasing] Apparent virus in qt downloads? In-Reply-To: References: <1f809904-d118-a017-97ff-4d0bcdaf743f@gmx.de> Message-ID: <3685ed28-1e6f-f41d-2861-82a60aa06524@gmx.de> Hi, Avast just warned me again. This time for a file already installed. I have attached a screenshot that contains the filename. I went on to do a smart scan and avast did not detect a virus. Best Daniel On 06.07.2016 09:33, Kai Koehne wrote: > It doesn't seem to complain about the installer executable itself, but about an archive that's fetched online. > > Does it tell you more if you select 'Smart Scan ausführen'? > > Regards > > Kai > >> -----Original Message----- >> From: Daniel [mailto:xracoonx at gmx.de] >> Sent: Wednesday, July 06, 2016 9:27 AM >> To: Kai Koehne ; releasing at qt-project.org >> Subject: Re: [Releasing] Apparent virus in qt downloads? >> >> Hi, >> >> Unfortunately, avast seems not provide those details in the logs. It only >> mentions the qt online installer. I could try the download again. >> Can I extract the information from the qt online installer somehow? >> >> Daniel >> >> On 06.07.2016 09:19, Kai Koehne wrote: >>> Hi, >>> >>> Would be still interesting to know which file it is complaining about ... Any >> chance you can get the full path + maybe the m5sum of the file in question? >>> >>> Thanks >>> >>> Kai >>> >>>> -----Original Message----- >>>> From: Releasing [mailto:releasing-bounces+kai.koehne=qt.io at qt- >>>> project.org] On Behalf Of Daniel >>>> Sent: Wednesday, July 06, 2016 9:05 AM >>>> To: releasing at qt-project.org >>>> Subject: [Releasing] Apparent virus in qt downloads? >>>> >>>> Hi, >>>> >>>> I just tried to download x86 windows 7 qt via the unified installer >>>> but it did not succeed because of a virus warning (screenshot attached). >>>> >>>> Daniel > -------------- next part -------------- A non-text attachment was scrubbed... Name: Qt-virus-warning.png Type: image/png Size: 10694 bytes Desc: not available URL: